CVE-2023-53518
PM / devfreq: Fix leak in devfreq_dev_release()
Description
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call. Reported by kmemleak.
INFO
Published Date :
Oct. 1, 2025, 12:15 p.m.
Last Modified :
Oct. 1, 2025, 12:15 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2023-53518
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Update the Linux kernel.
- Apply the fix for devfreq_dev_release.
- Ensure srcu_cleanup_notifier_head is called.
- Verify resource deallocation.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-53518.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-53518 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-53518
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-53518 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-53518 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 01, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call. Reported by kmemleak. Added Reference https://git.kernel.org/stable/c/111bafa210ae546bee7644be730c42df9c35b66e Added Reference https://git.kernel.org/stable/c/1640e9c72173911ad0fddb05012c01eafe082c4e Added Reference https://git.kernel.org/stable/c/29811f4b8255d4238cf326f3bb7129784766beab Added Reference https://git.kernel.org/stable/c/3354c401c68d70567d1ef25d12f4e22a7813a3c6 Added Reference https://git.kernel.org/stable/c/5693d077595de721f9ddbf9d37f40e5409707dfe Added Reference https://git.kernel.org/stable/c/64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d Added Reference https://git.kernel.org/stable/c/7462483446cb9986568ad7adae746ce5f18d2968 Added Reference https://git.kernel.org/stable/c/8918025feb2f5f7c73f2495c158f22997e25cb02 Added Reference https://git.kernel.org/stable/c/ab192e5e5d3b48415909a8408acfd007a607bcc0